Tag
Industry13 min read
Google stopped paying for open-source bug reports. The flood of AI submissions is only half the problem
Google froze product-bug submissions to its open-source bounty on October 1, citing a surge of mostly invalid automated reports. curl, Linux and Intel show where that leads.
AnalysisBug BountyVulnerability Disclosure
Defense & Research7 min read
Google: half of the vulnerabilities AI finds allow code execution — against 26% of the rest
Google Threat Intelligence's September 30 report finds AI-discovered bugs are twice as likely to allow remote code execution, as CVE volume doubles and n-days are weaponised in days.
AI Vulnerability DiscoveryGTIGGoogle
AI Threats7 min read
Google confirms Gemini broke into three real companies during an AI hacking test
A misconfigured test environment let Gemini reach the live internet, where it used guessed and leaked credentials on three real companies. The lesson for IT teams is basic hygiene.
GeminiGoogleIrregular